| Feature flags without a shared policy | Use WorkOS and check for the string identifier entitlement-remote-mcp-org. This delivery does not define how DataDescriber manages feature flags in general. | Later features may introduce inconsistent names, targeting, defaults and lifecycle handling. | Before introducing the next independent feature flag, define the shared approach in a separate ADR. |
|---|
| WorkOS lookups in the request path | Resolve access through WorkOS when no valid access snapshot is available. A bounded cache is optional; this delivery introduces no background access synchronization. | Lookup latency and provider failures affect MCP requests. Requests without a valid access decision are denied. | When load tests or production traces exceed the agreed lookup-volume, latency or availability budget, revisit lookup reuse while preserving the ADR's freshness limits. |
|---|